byted-sms-sender

byted-sms-sender is a skill for Codex from bytedance/agentkit-samples. It costs 189 tokens per session (1,089 once invoked), scanned A, original, Apache-2.0.

A tool for sending and managing domestic SMS messages through Volcano Engine. It covers individual and bulk messages, verification codes, notifications, templates, sender signatures, delivery receipts, and delivery statistics.

In plain words
What is it for?
It is for applying for SMS qualifications, signatures, and templates, sending approved messages, checking delivery results, and reviewing success or failure reasons.
Why use it?
It structures the setup, approval, preview, sending, and status-checking steps required for SMS operations.

Skill for Codex ✓ vendor

Written for Codex: agents/openai.yaml present.

Good fit It is for applying for SMS qualifications, signatures, and templates, sending approved messages, checking delivery results, and reviewing success or failure reasons.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/bytedance/agentkit-samples/byted-sms-sender
About the project

bytedance/agentkit-samples is a collection of examples and tutorials for Volcengine AgentKit, an AI-agent development platform for building, deploying, and operating agent applications. Developers use the samples to learn agent creation, multi-agent collaboration, memory, retrieval, MCP integrations, media generation, customer service, and other workflows. The catalogue skills provide agent workflows based on these examples.

bytedance/agentkit-samples · 450 stars · on GitHub

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add bytedance/agentkit-samples --skill byted-sms-sender
Clone the repo
git clone --depth 1 https://github.com/bytedance/agentkit-samples

Made for: Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for byted-sms-sender

README.md
[![agentmods](https://agentmods.dev/badge/skills/bytedance/agentkit-samples/byted-sms-sender/github.svg)](https://agentmods.dev/skills/bytedance/agentkit-samples/byted-sms-sender)
Your own site
<a href="https://agentmods.dev/skills/bytedance/agentkit-samples/byted-sms-sender"><img src="https://agentmods.dev/badge/skills/bytedance/agentkit-samples/byted-sms-sender/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for byted-sms-sender

Your own site · 80×15
<a href="https://agentmods.dev/skills/bytedance/agentkit-samples/byted-sms-sender"><img src="https://agentmods.dev/badge/skills/bytedance/agentkit-samples/byted-sms-sender.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 189 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,089 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00189 $0.01089
Opus 5 $0.00095 $0.00544
Sonnet 5 $0.00038 $0.00218
Haiku 4.5 $0.00019 $0.00109

Measured 5d ago against content hash 1f61ab2e2d97, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

byted-sms-sender scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

The scan reads SKILL.md. This mod also ships 11 executable files (assets/qualification_wizard_vendor/react-dom.production.min.js, assets/qualification_wizard_vendor/react.production.min.js, assets/qualification_wizard.js, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/byted-sms-sender/SKILL.md · 64 lines

How it starts

The opening of the file, as written. The whole thing — 64 lines — stays where its author put it; the contents beside it link to each section on GitHub.

火山引擎短信

始终通过 python3 -B <skill目录>/scripts/sms_cli.py 执行业务,不绕过脚本调用写 Action。默认客户不会使用终端:Agent 负责安装、登录、命令和清理,客户只操作浏览器 并确认业务写入。除非客户询问,不展示命令、JSON、CLI、Profile、HOME、AK/SK 或沙箱。

入口流程

  1. 首次调用或鉴权失败时读取 auth-setup.md,执行 auth-doctor 并严格跟随唯一 error.remediationauth_ready 后恢复原任务。
  2. 首次业务调用执行只读 list-message-groups。只有 RE:0001 才读取 service-onboarding.md;空列表和资源缺失不代表服务 未开通。
  3. 按任务读取下面最小参考集合,再执行 CLI。

按任务读取

CLI 工作流

  • 查询:list-message-groupsmessage-group-detaillist-qualificationslist-signatureslist-templates
  • 资质:先尝试 MCP App 右侧面板;调用 open_qualification_application 后紧接着调用 ensure_qualification_application_visible。面板不可见时按 qualification-display.md 改用宿主内置浏览器, 宿主不支持时才使用系统浏览器。
  • 申请:*-preview → 客户确认 → *-submit
  • 单发:match-templatesend-preview → 客户授权 → send-submitsend-status
  • 群发:batch-template-demo / batch-precheckbatch-createbatch-launch-preview → 指定任务授权 → batch-launch-submit;管理使用 batch-detailbatch-listbatch-cancel
  • 分析:analytics;只有需要消息级证据时增加 --include-logs

不可变边界

  • 鉴权只执行 remediation;同一时间一个登录会话。其他登录方式不索取登录入口链接,AK/SK 只在客户主动选择时提示一套 VOLCENGINE_* 变量。
  • 资质敏感材料只在本机向导填写。Agent 读取掩码后的 QUALIFICATION_EXCHANGEQUALIFICATION_FAILURE 排查,不要求客户复制字段或上传到对话。
  • 申请、发送和任务启动都基于当前预览授权;字段变化后重新预览。
  • 可能已发出的写请求不重试、不切换调用路径,返回 outcome_unknown 并按契约对账。
  • 创建或启动群发不代表送达;只有公开发送日志是消息级证据。
  • 最终输出不包含完整个人信息、图片、文件地址、凭证、ticket、Authorization 或签名 URL 查询参数;保留公开 Request ID 和错误码,不推断内部原因。

Read the full file on GitHub · 64 lines

Files

What ships with it

30 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago First seen · 64 lines · 189 tokens per session scan A 1f61ab2e2d97

Subscribe to this mod's changes

byted-sms-sender is a skill published in the GitHub repository bytedance/agentkit-samples (450 stars, last pushed 5d ago), licensed Apache-2.0. It adds 189 tokens to every session and 1,089 once invoked, about $0.0009 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.